As part of the certification process, the independent German research institute for IT security tested in particular the Homematic IP Access Point and the Homematic IP App for possible vulnerabilities and security gaps. As in the past five years, the verdict of AV-Test is clear and positive: Both the iOS and Android versions of the app are "adequately secured" and there is also "no reason for serious criticism" in the area of communication with the Homematic IP Cloud.
Homematic IP relies on complex encryption and authentication based on AES (Advanced Encryption Standard) and CCM (Counter with CBC-MAC) for all device communication - both tried-and-tested technologies that banks also use. In addition to this "high level of security", AV-Test once again praises Homematic IP's sparing use of data and its detailed privacy policy as "exemplary". The entire use of the smart home system is completely anonymous and without annoying registration; only the IP address must be recorded in encrypted form for technical reasons. Conclusions about the identity or user behaviour are not possible.
To protect the security of its users, eQ-3 regularly has its products tested by independent institutes. In addition to AV-Test, the renowned VDE also certifies that Homematic IP meets the highest security standards: Homematic IP is the only smart home solution to have been certified for protocol, IT and data security for the fifth time in a row in 2021.
